Lucene search

K
redhatRedHatRHSA-2024:2410
HistoryApr 30, 2024 - 6:15 a.m.

(RHSA-2024:2410) Moderate: harfbuzz security update

2024-04-3006:15:38
access.redhat.com
2
harfbuzz
opentype layout
security update
o(n^2) growth
cve-2023-25193
red hat enterprise linux.

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.3%

HarfBuzz is an implementation of the OpenType Layout engine.

Security Fix(es):

  • harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks (CVE-2023-25193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.